
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier: qyg8RjqZurriXU2BFk0HqE+87bqb7jeyhB4/5bn+WQs=
Subject key identifier: D5:7C:79:D1:97:4C:21:4C:94:09:94:B7:CF:F0:DD:3F:0F:2F:88:BD
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 282D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number: 27C5
Signing time: Fri 12 Jun 2026 15:37:58 +0000
Manifest this update: Fri 12 Jun 2026 15:37:57 +0000
Manifest next update: Fri 19 Jun 2026 15:37:57 +0000
Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: MWwmTs2fJxWj4YaAe4SmRJtWmnbI2WLF4H+Ok+6D4Rw=)
2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
3: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
4: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
5: 79393030926D11F0B792FC45C4F9AE02.roa (hash: 6f7zOKjAnT7iAAMMmRKfpAbehqYkqXN2uO/gWAA/GDs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10285 (0x282d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: Jun 12 15:37:57 2026 GMT
Not After : Jun 19 15:37:57 2026 GMT
Subject: CN=6a2c27d6-f68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:01:8e:62:c3:9f:ff:9e:4c:d2:f3:e6:53:
dc:27:66:4d:31:82:01:ef:f0:20:d3:b5:aa:b8:c3:
f3:5e:18:90:3f:1e:ff:eb:8b:f5:2c:dc:81:f8:42:
52:7f:6a:fd:82:9c:ad:ed:71:70:0b:03:1f:43:09:
3e:6b:9d:94:ac:13:d0:50:77:02:62:9a:57:ac:cd:
56:78:38:1b:4a:9e:84:a0:b6:37:2c:04:58:c2:ff:
92:a3:d5:8e:26:49:f9:f3:73:f4:d2:f2:54:6f:2f:
37:84:e1:52:44:dc:2b:bd:35:4b:83:ed:e2:9e:b6:
61:58:a0:e8:db:93:4d:37:97:55:a0:59:cf:3c:1f:
33:e4:58:cd:4b:6a:c8:76:5c:c8:3c:c5:32:86:4e:
80:16:12:74:e9:85:cf:d1:99:e7:bd:3f:f3:c2:48:
96:4c:e6:3e:cc:92:53:3b:51:5c:9b:4a:6b:3c:42:
0f:92:3c:65:35:b1:02:65:96:54:4a:d2:6e:66:b6:
b7:a4:ce:ba:5e:64:b6:31:b4:db:7b:7d:c7:e6:a0:
dc:65:b7:a8:3e:d1:8d:0d:07:14:0f:4d:da:92:03:
cc:2b:e2:40:b6:f1:89:44:e0:69:07:c2:60:4a:21:
78:a1:e7:ba:f2:00:6e:ab:94:6c:b3:a8:ee:d9:fe:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:79:D1:97:4C:21:4C:94:09:94:B7:CF:F0:DD:3F:0F:2F:88:BD
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:13:b0:b7:30:4b:f9:f4:13:c0:e0:5a:bd:27:65:09:30:6d:
32:7b:0e:c9:b0:a9:9d:66:4b:af:82:26:58:be:a1:8b:37:46:
aa:16:28:9f:d6:90:bc:da:21:b2:04:8d:e1:4a:24:b0:fd:e1:
4a:18:60:ba:f3:c2:20:2a:de:06:7c:b3:a1:88:7e:c0:4a:c8:
b5:cf:de:ce:24:78:99:c1:f6:a2:0d:ea:4a:c9:80:67:da:d5:
b5:46:78:6c:f3:b6:0b:ae:1d:9f:44:11:f5:39:fc:b8:fd:dc:
85:79:04:4f:1b:45:e8:4c:eb:d7:96:9c:b9:33:56:a6:a2:e3:
b3:8a:cc:28:f4:1f:65:67:b4:e9:ba:f4:66:7d:d6:30:54:62:
09:34:fb:8c:a3:90:aa:80:93:59:ed:f8:2e:a8:c9:21:e6:c7:
56:4d:a3:50:49:a7:6f:da:37:88:36:58:37:3e:e7:e5:64:14:
c2:0a:bb:e1:82:17:42:41:70:85:4b:74:5e:b2:70:52:1b:9b:
ea:09:fc:cd:24:63:af:0f:81:02:66:e4:e5:8c:22:07:ad:5b:
dc:75:43:bb:9b:60:90:a9:b1:9a:83:c9:97:60:50:c4:63:d0:
6f:f2:06:d6:f9:dd:27:c3:e2:9d:09:a3:5f:ef:1c:b0:9f:3c:
49:ab:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:15 2026 by rpki-client